Encapsulation of payment information

Abstract

A method including receiving a signcrypted cross-border payment message, the signcrypted cross-border payment message generated by signcrypting a cross-border payment message using a first financial institution public key, a first financial institution private key, and a second financial institution public key, retrieving the first financial institution public key, the second financial institution public key, and a second financial institution private key, wherein the second financial institution public key and the second financial institution private key are part of a public/private key pair, unsigncrypting the signcrypted cross-border payment message using the first financial institution public key, the second financial institution public key, and the second financial institution private key to retrieve the cross-border payment message, and verifying that the first financial institution public key is associated with a first financial institution.

What is claimed: 
     
         1 . A method, comprising:
 receiving, by a beneficiary computing system from an intermediate computing system, a digitally signed cross-border message, wherein the digitally signed cross-border message is signed using at least one of a signedData cryptographic message syntax, detached signedData cryptographic message syntax, or signcryptedData cryptographic message syntax;   retrieving, by the beneficiary computing system, a public key of the intermediate computing system or an originating computing system;   verifying at least one of the digitally signed cross-border message or the intermediate computing system comprising determining, by the beneficiary computing system, at least one of:
 whether a digital signature and a hash of the digitally signed cross-border message is verified recursively; 
 whether a digital signature and a detached content of the digitally signed cross-border message is verified recursively; or 
 whether unsigncryption and path validation of the intermediate computing system is successful; and 
   approving by the beneficiary computing system a cross-border payment based at least in part on verifying the at least one of the digitally signed cross-border message or the intermediate computing system.   
     
     
         2 . The method of  claim 1 , further comprising:
 generating, by the beneficiary computing system, the hash of a content in the digitally signed cross-border message; and   signing, by the beneficiary computing system, the hash using the public key of the intermediate computing system.   
     
     
         3 . The method of  claim 2 , wherein in response to determining that signing the hash fails, failing to verify the digitally signed cross-border message and disapproving the cross-border payment. 
     
     
         4 . The method of  claim 2 , wherein in response to determining that signing the hash fails, verifying, by the beneficiary computing system, another digitally signed cross-border message sent by the originating computing system to the intermediate computing system. 
     
     
         5 . The method of  claim 1 , further comprising retrieving, by the beneficiary computing system, the detached content based at least in part on a method for transmitting the detached content. 
     
     
         6 . The method of  claim 1 , further comprising:
 generating, by the beneficiary computing system, a hash of the detached content; and   comparing, by the beneficiary computing system, the generated hash with a hash in the digitally signed cross-border message.   
     
     
         7 . The method of  claim 6 , wherein in response to determining that the generated hash is different from the hash in the digitally signed cross-border message, failing to verify the digitally signed cross-border message and disapproving the cross-border payment. 
     
     
         8 . The method of  claim 6 , wherein in response to determining that the generated hash is different from the hash in the digitally signed cross-border message, verifying, by the beneficiary computing system, another digitally signed cross-border message sent by the originating computing system to the intermediate computing system. 
     
     
         9 . The method of  claim 1 , wherein determining whether unsigncryption and path validation of the intermediate computing system is successful comprises unsigncrypting, by the beneficiary computing system, the digitally signed cross-border message using the public key of the intermediate computing system and a public/private key pair of the beneficiary computing system. 
     
     
         10 . The method of  claim 9 , in response to determining that the unsigncryption is valid, the digitally signed cross-border message is accepted. 
     
     
         11 . A system comprising a beneficiary computing system having one or more processors configured to:
 receive, from an intermediate computing system, a digitally signed cross-border message, wherein the digitally signed cross-border message is signed using at least one of a signedData cryptographic message syntax, detached signedData cryptographic message syntax, or signcryptedData cryptographic message syntax;   retrieve a public key of the intermediate computing system or an originating computing system;   verify at least one of the digitally signed cross-border message or the intermediate computing system comprising determining at least one of:
 whether a digital signature and a hash of the digitally signed cross-border message is verified recursively; 
 whether a digital signature and a detached content of the digitally signed cross-border message is verified recursively; or 
 whether unsigncryption and path validation of the intermediate computing system is successful; and 
   approving a cross-border payment based at least in part on verifying the at least one of the digitally signed cross-border message or the intermediate computing system.   
     
     
         12 . The system of  claim 11 , the one or more processors configured to:
 generate the hash of a content in the digitally signed cross-border message; and   sign the hash using the public key of the intermediate computing system.   
     
     
         13 . The system of  claim 12 , wherein in response to determining that signing the hash fails, the one or more processors configured to fail to verify the digitally signed cross-border message and disapproving the cross-border payment. 
     
     
         14 . The system of  claim 12 , wherein in response to determining that signing the hash fails, the one or more processors configured to verify another digitally signed cross-border message sent by the originating computing system to the intermediate computing system. 
     
     
         15 . The system of  claim 11 , the one or more processors configured to retrieve the detached content based at least in part on a method for transmitting the detached content. 
     
     
         16 . The system of  claim 11 , the one or more processors configured to:
 generate a hash of the detached content; and   compare the generated hash with a hash in the digitally signed cross-border message.   
     
     
         17 . The system of  claim 16 , wherein in response to determining that the generated hash is different from the hash in the digitally signed cross-border message, the one or more processors configured to fail to verify the digitally signed cross-border message and disapproving the cross-border payment. 
     
     
         18 . The system of  claim 16 , wherein in response to determining that the generated hash is different from the hash in the digitally signed cross-border message, the one or more processors configured to verify another digitally signed cross-border message sent by the originating computing system to the intermediate computing system. 
     
     
         19 . The system of  claim 11 , wherein determining whether unsigncryption and path validation of the intermediate computing system is successful comprises unsigncrypting the digitally signed cross-border message using the public key of the intermediate computing system and a public/private key pair of the beneficiary computing system. 
     
     
         20 . At least one non-transitory processor-readable medium comprising processor-readable instructions, such that when executed, causes at least one processor to:
 receive, from an intermediate computing system, a digitally signed cross-border message, wherein the digitally signed cross-border message is signed using at least one of a signedData cryptographic message syntax, detached signedData cryptographic message syntax, or signcryptedData cryptographic message syntax;   retrieve a public key of the intermediate computing system or an originating computing system;   verify at least one of the digitally signed cross-border message or the intermediate computing system comprising determining at least one of:
 whether a digital signature and a hash of the digitally signed cross-border message is verified recursively; 
 whether a digital signature and a detached content of the digitally signed cross-border message is verified recursively; or 
 whether unsigncryption and path validation of the intermediate computing system is successful; and 
   approving a cross-border payment based at least in part on verifying the at least one of the digitally signed cross-border message or the intermediate computing system.